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REMARKS 

Claims 1-4, 7-9, 12-13, 16-19, 22-24, 27-28 and 31-40 are pending. The independent 
claims were amended as discussed below. New dependent claims 31-40 were added to further 
define embodiments of the present invention. Claims 5-6 and 21-22 were canceled, and their 
subject matter was incorporated into claims 1 and 16, respectively, in modified form as discussed 
below. Likewise, claims 10-11,14-15, 25-26 and 29-30 were canceled, and their subject matter 
was incorporated into claims 7, 12, 22 and 27, respectively, in modified form as discussed below. 

No new matter was added. The feature added to each of the independent claims wherein 
the list of cookie files is a list of untrusted cookie files is disclosed on at least page 6, lines 2-3 of 
the present specification. The feature in new dependent claims 31, 32 and 34 regarding a watch 
list of untrusted cookie file sources is disclosed on at least page 6, lines 1-4 of the present 
specification. 

Examiner Interview 

Applicants wish to thank Examiner LeRoux for extending the courtesy of a personal 
interview with Applicants' undersigned representative on July 16, 2009. During pre-interview 
phone calls on July 15, 2009, and during the interview itself, the contents of draft Amendments 
faxed on July 14 and 15, 2009 were discussed. A summary of the key issues that were discussed 
follows below: 

1 . Upon reviewing the draft Amendment faxed on July 14, 2009, the Examiner 
telephoned Applicants' undersigned representative on July 15, 2009 to propose that the subject 
matter of claims 2 and 17 be incorporated into claims 1 and 16 to potentially place the 
application in condition for allowance. Upon further review, Applicants have respectfully 
declined this suggestion, but instead have incorporated the protective measures discussed in the 
paragraph numbered 3 below into claims 1 and 16, thereby making the amendments to claims 1 
and 16 consistent with the amendment to the other independent claims that the Examiner deemed 
acceptable to place such claims in condition for allowance. To minimize the number of 
additional claims, Applicants have recited the protective measures in alternative form in the new 
clause of independent claims 1 and 16 (i.e., at least one of the protective measures must be 
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taken). Applicants believe that claims 1 and 16 are patentable even without the protective 
measures feature for at least the reasons discussed below, but have added this feature in an 
earnest effort to advance prosecution of the application. 

2. During the personal interview on July 16, 2009, Applicants reviewed the arguments for 
patentability presented in the revised draft Amendment. 

3. The Examiner stated that independent claims 7, 12, 22 and 27 would be allowable if 
the protective measures recited in dependent claims 10-11, 14-15, 25-26 and 29-30 were 
incorporated into their respective independent claims 7, 12, 22 and 27. Applicants believe that 
the version of independent claims 7, 12, 22 and 27 filed in the revised draft Amendment are 
patentable for at least the reasons discussed below. However, in an earnest effort to advance 
prosecution of the patent application, Applicants have made the further amendment requested by 
the Examiner. To minimize the number of additional claims, Applicants have recited the 
protective measures in alternative form in the new clause of independent claims 7, 12, 22 and 27 
(i.e., at least one of the protective measures must be taken). 

Prior Art Rejection 

Claims 1, 5, 16, 20, 25 and 29 were rejected under 35 U.S.C. § 102(b) as being 
anticipated by Montulli. 

Claims 2, 6-8, 10-14, 15, 17, 21-23, 26-28 and 30 were rejected under 35 U.S.C. 
§ 103(a) as being unpatentable over Montulli in view of Walker et al. (Walker) 

Claims 4 and 19 were rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Montulli in view of Shrader. 

Claims 3 and 18 were rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Montulli in view of Julien Jay (Norton Internet Security 2000 (NIS 2000)). 

Claims 9 and 24 were rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Montulli in view of Walker and NIS 2000. 

Applicants respectfully traverse these rejections for at least the reasons set forth below. 
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1. Montulli 

Montulli was applied against the claims, both individually and in combination with other 
references, in previous Office Actions dated June 24, 2003, April 21, 2004 and December 20, 
2004. Applicants successfully traversed all of those rejections. Montulli is now being applied 
against the claims, individually and in combination with other references, but new portions of 
Montulli are now being referenced in the reasons for the rejection. However, the pending claims 
are believed to be patentable over these new portions. 

Applicants' responses to the previous Montulli-based rejections included extensive 
remarks regarding the disclosure in Montulli. Some of those remarks, as well as new remarks 
that address the currently highlighted portions of Montulli, are summarized below: 

1. Montulli is a well-known patent that is touted as describing the original concept of a 
cookie. See page 1 1 of Appendix A attached to Applicants' Response filed October 10, 2004, 
especially footnote 20. (U.S. Patent No. 5,774,670 is the parent patent of Montulli '242.). 

2. Montulli discloses the use of a conventional list of cookies stored in a file of a browser 
program. The cookies are received by the browser program in a header that is sent as part of a 
response to http requests for web pages or web/HTML documents (column 7, lines 28-37). 

3. Montulli does not disclose or suggest the concepts of requesting, receiving, 
downloading, or using a list of cookie file sources as set forth in step (a) of claims 1, 12, 16 and 
27, and step (c) of claims 7 and 22, or any of the remaining steps in these claims that use the list 
of cookie file sources. 

4. The client system in Montulli does not request the one or more cookies that are sent in 
the header (column 7, lines 34-35). The client system only requests a web page or an 
web/HTML documents, and the return message from the web server includes the header with the 
one or more cookies. Thus, there is no concept in Montulli of requesting the cookies. 

5. The cookies sent in Montulli are presumed to be trusted cookies because the user, via 
the client machine, requested the web page or web document. Furthermore, Montulli teaches 
that the cookies are stored on the client system (column 7, lines 35-38). Thus, even if it is 
presumed that a header in Montulli that includes a plurality of cookies can read on the claimed 
"list of cookie files sources," Montulli actually teaches away from sending a list of untrusted 
cookie file sources, as now recited in the claims. 
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2. Patentability of independent claims 1 and 16 over Montulli 

Claim 1: See pages 1-4 of the Remarks column of the attached Claim Chart. 
Claim 16: Same reasons as applied to claim 1. 

3. Patentability of independent claims 7, 12, 22 and 27 over Montulli in view of Walker 

Claim 7: See page 4 of the Remarks column of the attached Claim Chart. 
Claim 12: See page 5 of the Remarks column of the attached Claim Chart. 
Claim 22: Same reasons as applied to claim 7. 
Claim 27: Same reasons as applied to claim 12. 

4. Patentability of new dependent claims 31-40 

Claims 31-35: See pages 6-7 of the Remarks column of the attached Claim Chart. 
Claims 36-40: Same reasons as applied to claims 31-35. 

Furthermore, these claims are believed to be allowable because they depend upon 
respective allowable independent claims, and because they recite additional patentable steps. 

Nor do the remaining applied references (Shrader or NIS2000) make up for any of the 
highlighted deficiencies in Montulli and Walker. 

5. Patentability of remaining dependent claims 

The remaining dependent claims are believed to be allowable because they depend upon 
respective allowable independent claims, and because they recite additional patentable steps. 

Nor do the remaining applied references (Shrader or NIS2000) make up for any of the 
highlighted deficiencies in Montulli and Walker. 

Conclusion 

Insofar as the Examiner's rejections were fully addressed, the instant application is in 
condition for allowance. Issuance of a Notice of Allowability of all pending claims is therefore 
earnestly solicited. 
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Respectively submitted, 



Adam R. Schran et al. 



Tuiy aoof By: 




(Date) / 



CLARK A. JABLON 



Registration No. 35,039 V) 
PANITCH SCHWARZE BELISARIO & NADEL LLP 
One Commerce Square 
2005 Market Street, Suite 2200 
Philadelphia, PA 19103-7013 
Telephone: 215-965-1330 
Direct Dial: 215-965-1293 



Enclosure: Claim Chart (7 pages) 
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sending untrusted cookies to a client machine. 

Nor is any watch list of untrusted cookie file 
sources maintained at Walker's web site 
authorization server 150. 




As discussed above, Montulli teaches awav 
from sending untrusted cookies to a client 
machine. 

Nor does Walker disclose or suggest a client 
machine requesting a master list of untrusted 
cookie file sources. 






No watch list of untrusted cookie file sources is 
maintained at Montulli's server. Furthermore, 
as discussed above, Montulli teaches away from 
sending untrusted cookies to a client machine. 

Nor is any watch list of untrusted cookie file 
sources maintained at Walker's web site 
authorization server 150. 




As discussed above, Montulli teaches away 
from sending untrusted cookies to a client 
machine. 

Nor does Walker disclose or suggest a client 
machine requesting a master list of untrusted 
cookie file sources. 






Same arguments as corresponding claims 31-35 | 








not applicable (new claim) 




not applicable (new claim) 




not applicable (new claim) 




not applicable (new claim) | 




file sources at the service provider, wherein the 
master list of untrusted cookie file sources that 
is received at the client machine from the 
service provider is obtained from the watch list. 




33. (New) The method of claim 7 further 
comprising: 

(e) receiving, at the service provider, a request 
from the client machine to send a master list of 
untrusted cookie file sources to the client 
machine, wherein the master list of untrusted 
cookie file sources received at the client 
machine is received in response to the request 
from the client machine. 




34. (New) The method of claim 12 further 
comprising: 

(d) maintaining a watch list of untrusted cookie 
file sources at the service provider, wherein the 
master list of untrusted cookie file sources that 
is received at the client machine from the 
service provider is obtained from the watch list. 




35. (New) The method of claim 12 further 
comprising: 

(d) receiving, at the service provider, a request 
from the client machine to send a master list of 
untrusted cookie file sources to the client 
machine, wherein the master list of untrusted 
cookie file sources received at the client 
machine is received in response to the request 
from the client machine. 




1 36-40. (New) 1 





